Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa
File:                     6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa (raw, json)
Hash identifier:          kpGJFIPTIs4S0XimeJyd4bO2LpNmwSKVAHe3Rx/fG1s=
Subject key identifier:   75:D6:35:8E:EA:6E:DB:7C:A2:AF:53:83:04:C2:23:00:B4:35:F7:11
Certificate issuer:       /CN=b112dbf9-e037-4085-8a8c-b84035c902a4
Certificate serial:       010D0C9F4328584792CCC812DA25591D81E79F80
Authority key identifier: 56:86:88:E2:95:0E:27:9C:0A:C9:A7:B7:38:1E:F1:5F:9D:39:A2:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa
Signing time:             Thu 17 Oct 2024 17:20:35 +0000
ROA not before:           Thu 17 Oct 2024 17:20:35 +0000
ROA not after:            Wed 15 Jan 2025 18:20:35 +0000
asID:                     53971
IP address blocks:        141.193.80.0/22 maxlen: 24
                          167.248.136.0/21 maxlen: 24
                          173.250.232.0/21 maxlen: 24
                          204.122.20.0/22 maxlen: 24
                          2605:81c0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:cc:c8:12:da:25:59:1d:81:e7:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b112dbf9-e037-4085-8a8c-b84035c902a4
        Validity
            Not Before: Oct 17 17:20:35 2024 GMT
            Not After : Jan 15 18:20:35 2025 GMT
        Subject: CN=5b1a4dff-a4c4-40c4-8e2e-f3273cf1dabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:c3:ba:6d:fb:fa:1a:fe:6f:9c:c7:73:b3:
                    2d:ec:9c:3a:9d:0b:ef:f9:7d:5f:7e:27:4a:fe:f3:
                    1a:da:34:c9:64:d7:06:8d:25:c4:c0:7c:34:b9:09:
                    f5:0d:01:95:36:ce:18:98:2f:b8:71:6d:9e:0a:c9:
                    9e:80:9f:87:b7:7e:c9:9e:97:49:53:41:23:d2:8b:
                    a4:74:71:70:d1:01:fe:e7:aa:de:c0:9c:b7:32:7c:
                    f0:57:94:e0:39:55:9b:49:4d:77:4d:46:1f:fd:cd:
                    29:1d:83:cc:a7:5c:a3:09:8b:f1:74:56:bd:ae:f4:
                    43:e8:3d:35:15:ef:7b:ec:d1:cd:e5:6f:e4:8d:e1:
                    71:13:5f:45:45:b8:be:a0:86:da:60:55:c8:83:fc:
                    4c:5d:68:d9:8d:9b:78:94:00:c5:46:a3:64:fd:79:
                    31:f8:ee:8e:9f:e3:b9:ca:6f:1f:dd:39:91:1e:3a:
                    3f:77:d8:03:5b:0a:c0:91:a6:44:df:ef:a1:1b:8c:
                    07:cd:80:51:b3:3f:2c:12:7c:cf:c3:1e:dd:bd:63:
                    9d:58:3d:b6:33:f8:bc:60:b4:7c:65:31:b0:31:7d:
                    2c:f1:4b:02:20:1b:1f:6a:09:6c:d2:aa:2c:9f:77:
                    c2:4f:b8:27:f6:0e:b0:2e:bc:93:40:de:68:cd:ad:
                    bc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D6:35:8E:EA:6E:DB:7C:A2:AF:53:83:04:C2:23:00:B4:35:F7:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/6e03baf6-1a47-33b6-8f5a-9f3f506ef56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4/b112dbf9-e037-4085-8a8c-b84035c902a4.crl

            X509v3 Authority Key Identifier:
                keyid:56:86:88:E2:95:0E:27:9C:0A:C9:A7:B7:38:1E:F1:5F:9D:39:A2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b112dbf9-e037-4085-8a8c-b84035c902a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.80.0/22
                  167.248.136.0/21
                  173.250.232.0/21
                  204.122.20.0/22
                IPv6:
                  2605:81c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:f5:69:03:57:c0:53:45:cb:fa:3f:d0:4e:a5:9b:c2:27:
         39:16:a8:c6:2c:14:42:5e:f2:52:07:6f:d4:9e:57:9a:87:d5:
         75:32:33:51:c4:2a:9b:45:64:06:cb:ec:c4:60:91:52:37:c6:
         ae:2c:3c:d7:f3:4f:f7:95:02:2c:38:cd:54:a2:54:5f:82:04:
         74:ad:88:3f:62:ad:8a:13:3c:01:58:d8:3f:a8:99:37:97:ad:
         b2:7c:11:bd:b6:b1:73:5e:6d:b9:c5:8c:d4:7b:44:a0:7f:cb:
         b0:8d:a5:a9:4a:f4:3d:d9:48:d9:a1:1f:c5:8e:be:dc:f0:8d:
         88:d6:01:12:c1:0b:27:d5:92:f0:08:4e:65:bd:5b:9a:eb:81:
         b7:ee:8d:f6:d9:3b:c6:75:07:2c:d8:91:e8:c5:7b:2d:e4:53:
         e1:9f:8a:f9:6e:f3:a1:36:1c:5e:50:4b:e2:d2:48:93:75:96:
         c9:64:e5:6c:d8:3d:1f:7c:95:af:7f:bf:0f:e2:c3:15:97:1a:
         90:e5:1c:43:b8:c4:0f:e2:7f:6a:c7:2c:26:f2:e9:da:54:ed:
         1e:7a:df:01:20:27:ca:fc:d5:44:3a:e3:2d:46:81:57:7e:3a:
         0a:b9:34:5a:80:06:a4:11:2c:66:f9:82:19:12:52:19:a7:a5:
         c6:d4:96:8a
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEeSzMgS2iVZHYHnn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjExMmRiZjktZTAzNy00MDg1LThhOGMtYjg0MDM1Yzkw
MmE0MB4XDTI0MTAxNzE3MjAzNVoXDTI1MDExNTE4MjAzNVowLzEtMCsGA1UEAxMk
NWIxYTRkZmYtYTRjNC00MGM0LThlMmUtZjMyNzNjZjFkYWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqHDum37+hr+b5zHc7Mt7Jw6nQvv+X1ffidK
/vMa2jTJZNcGjSXEwHw0uQn1DQGVNs4YmC+4cW2eCsmegJ+Ht37JnpdJU0Ej0ouk
dHFw0QH+56rewJy3MnzwV5TgOVWbSU13TUYf/c0pHYPMp1yjCYvxdFa9rvRD6D01
Fe977NHN5W/kjeFxE19FRbi+oIbaYFXIg/xMXWjZjZt4lADFRqNk/Xkx+O6On+O5
ym8f3TmRHjo/d9gDWwrAkaZE3++hG4wHzYBRsz8sEnzPwx7dvWOdWD22M/i8YLR8
ZTGwMX0s8UsCIBsfagls0qosn3fCT7gn9g6wLryTQN5oza28AwIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFHXWNY7qbtt8oq9TgwTCIwC0NfcRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iMTEy
ZGJmOS1lMDM3LTQwODUtOGE4Yy1iODQwMzVjOTAyYTQvNmUwM2JhZjYtMWE0Ny0z
M2I2LThmNWEtOWYzZjUwNmVmNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjExMmRiZjktZTAzNy00MDg1LThh
OGMtYjg0MDM1YzkwMmE0L2IxMTJkYmY5LWUwMzctNDA4NS04YThjLWI4NDAzNWM5
MDJhNC5jcmwwHwYDVR0jBBgwFoAUVoaI4pUOJ5wKyae3OB7xX505onMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iMTEyZGJmOS1lMDM3LTQwODUtOGE4Yy1iODQw
MzVjOTAyYTQuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCjcFQAwQD
p/iIAwQDrfroAwQCzHoUMA0EAgACMAcDBQAmBYHAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAzO9WkDV8BT
Rcv6P9BOpZvCJzkWqMYsFEJe8lIHb9SeV5qH1XUyM1HEKptFZAbL7MRgkVI3xq4s
PNfzT/eVAiw4zVSiVF+CBHStiD9irYoTPAFY2D+omTeXrbJ8Eb22sXNebbnFjNR7
RKB/y7CNpalK9D3ZSNmhH8WOvtzwjYjWARLBCyfVkvAITmW9W5rrgbfujfbZO8Z1
ByzYkejFey3kU+Gfivlu86E2HF5QS+LSSJN1lslk5WzYPR98la9/vw/iwxWXGpDl
HEO4xA/if2rHLCby6dpU7R563wEgJ8r81UQ64y1GgVd+Ogq5NFqABqQRLGb5ghkS
UhmnpcbUloo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:26 2024 by rpki-client on console-fra.rpki-client.org